Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32342d3234203d3e203532393133.roa
File:                     3136372e3234392e342e302f32342d3234203d3e203532393133.roa (raw, json)
Hash identifier:          2Xiv072VCfDHSsp1Befkhdr7sRwDb7FRtTss/ko871w=
Subject key identifier:   3F:DD:07:0E:51:EA:4C:7F:5F:1F:AF:D0:58:14:8D:AD:16:6F:A9:4F
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       4ECB8A740F3EEF940CA071AE9C9C2F81634B1E5B
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32342d3234203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:47 +0000
ROA not before:           Thu 07 Mar 2024 21:15:47 +0000
ROA not after:            Thu 06 Mar 2025 21:20:47 +0000
asID:                     52913
IP address blocks:        167.249.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:8a:74:0f:3e:ef:94:0c:a0:71:ae:9c:9c:2f:81:63:4b:1e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:47 2024 GMT
            Not After : Mar  6 21:20:47 2025 GMT
        Subject: CN=3FDD070E51EA4C7F5F1FAFD058148DAD166FA94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:00:23:a9:51:e3:22:c5:b0:3f:14:1c:64:
                    03:4d:11:a1:de:09:51:3f:2b:5d:40:cf:50:2a:a6:
                    a7:02:c4:18:ca:a4:77:94:8f:60:10:8e:e3:60:4a:
                    a2:46:13:84:05:c4:56:48:fd:64:51:a0:e1:bb:2b:
                    3f:3a:15:44:cf:4a:fe:92:c1:c9:2d:73:98:37:0b:
                    93:75:a4:01:f0:e6:c3:13:e2:a0:25:c4:d5:bf:86:
                    7f:84:59:a8:b1:cb:79:98:31:28:31:da:40:36:d0:
                    d6:f7:4f:4f:9b:b0:93:d3:0e:f2:38:fc:33:c4:8f:
                    a3:a1:11:9e:e1:55:3e:b8:49:83:9c:f9:83:00:08:
                    57:73:71:8f:6c:ea:83:41:b9:c8:98:76:ec:ba:9d:
                    03:ff:57:36:40:74:e2:57:c1:6c:3d:95:b0:b3:9b:
                    78:6c:c5:27:50:c9:30:ac:b5:1e:04:fb:00:76:1f:
                    a2:06:b3:74:52:dd:4e:cd:44:fe:cf:52:f9:2a:7f:
                    d9:c8:a8:fc:e2:5f:8e:1a:bb:77:f8:87:57:6e:fa:
                    76:0d:99:5c:49:04:13:bd:90:d2:b9:24:6f:fa:08:
                    33:f0:81:1f:28:a4:2e:ed:36:93:03:27:d3:59:cf:
                    43:9e:16:10:c3:be:87:de:dc:e3:56:b3:d1:0d:d8:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:07:0E:51:EA:4C:7F:5F:1F:AF:D0:58:14:8D:AD:16:6F:A9:4F
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32342d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:90:cb:cb:3c:67:6c:f3:ab:cd:60:f9:a6:47:d1:85:b8:
         7c:b7:ac:6b:4f:12:cf:d6:10:0e:4b:c1:d2:d9:8b:d2:cc:bc:
         f8:71:bc:6d:fb:1a:b9:b8:c0:6c:b8:01:7f:11:22:db:6c:55:
         99:df:c5:7e:1a:d2:a7:3b:b8:51:dc:a5:ab:f5:09:96:76:17:
         dd:bc:dd:df:0c:e1:34:d6:04:53:e5:d2:18:c9:8b:52:47:f2:
         84:56:22:b4:b0:4e:23:a8:f0:a3:81:0b:9d:63:03:10:92:9d:
         99:4f:78:ce:b4:ba:28:28:8b:62:63:17:5c:3a:ff:ab:39:3d:
         1b:0c:44:c2:af:9e:8d:be:2a:1b:92:96:52:fd:14:6d:82:3f:
         42:a2:c4:17:c6:ee:65:bd:b0:5a:bc:8f:6f:55:9a:43:7f:50:
         4d:60:8f:46:99:96:31:7d:55:56:2d:ff:e5:5a:d6:17:93:99:
         bc:cd:92:d5:e4:9c:e4:a0:ff:bc:3f:c7:36:90:46:29:ba:ec:
         dd:bd:d2:02:8c:d4:bc:f1:f7:d3:63:71:4f:84:3a:35:bd:c5:
         42:61:c6:40:6d:3c:88:7b:45:0f:b6:ce:dc:01:5e:90:82:e5:
         78:0c:93:ca:d1:27:00:6f:dc:3e:92:2a:64:ef:2c:7b:f2:1a:
         b3:99:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org